diff --git a/salt/elasticagent/soc_elasticagent.yaml b/salt/elasticagent/soc_elasticagent.yaml
new file mode 100644
index 000000000..a24ac1985
--- /dev/null
+++ b/salt/elasticagent/soc_elasticagent.yaml
@@ -0,0 +1,4 @@
+elasticagent:
+  enabled:
+    description: Enables or disables the Elastic Agent process. This process must remain enabled to allow collection of node events.
+    advanced: True